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Instructions: 

The attached has been assigned to your Unit an'd should be 
finalized before the due date shown above. 

If this matter needs to be reassigned to another entity, 
the FBI Central Registry (CR) should be advised immediately. The 
CR will need to know to whom request was reassigned, together with 
room and telephone numbers and contact point. 

All responses are to be routed to the DOJ Executive 
Secretariat by the CR; therefore, the entire package should be 
sent to Room 6242. A copy of all outgoing correspondence MUST 
be designated for the FBI Central Registry (FBICR), Room 6242. 

This copy must contain a copy of the control sheet or the Executive 
Secretariat control number since the CR must close out all requests. 
An additional copy is required for Executive Secretariat, DOJ, 

Room 4400AA, as instructed on the ES control sheet. These copies 
should appear as: 

1 - Exec Sec, DOJ, Room 4400AA - Encs. 

1 - OLA, DOJ, Room 1612 - Enc. 

1 - FBICR, Room 6242 - Enc. (or Control #) 


RETURN ENTIRE PACKAGE TO ROOM 6242 


DO NOT SEND TO MAILROOM 




Department of Justfte 


1. FOLDER No: 

2. TRACKING ID 

3. RESERVED 


EXECUTIVE SECRETARIAT 

CONTROL SHEET all information cdetained 

HEBE IE IS UNCLASSIFIED 

DATE 09-24-2012 BY 60324/UC fb aw/saB/as 

500767 4. DATE OF DOCUMENT: 03/20/98 

No: X98-036690 5. DATE RECEIVED: 03/23/98 

6. DUE DATE: 04/02/98 


7. from: Louis J. Freeh 

Director 

Federal Bureau of investigation 
Washington, DC 20535 


8. TO: AG 


9. CATEGORY: MEM-ACTION 


10.SUBJECT: 

Memo regarding items proposed for dissemination to the NSC. Provides 
an update on two cases in which the NSC has expressed an interest. 
See folders 498180, 498136 & 486197. Attachments. See folder 502036. 

11.ACTION/INFORMATION: 


Referred To: 
ESFILES 


OAG 

ODAG 


Referred To: 


Date Assigned: Action: 

03/31/98 For closing, filing, and 

dispatching. 

AG approved and signed on 3-30-98 by 
OAG. Original forwarded to FBI for 
handling. 

03/26/98 For AG decision. 

For AG approval/disapproval. 

03/24/98 For dag initialing on Action 

Memorandum. 

Return to Executive secretariat for 
forwarding to AG. 

3/26/98: dag initialed on 3/25/98. 
Date Assigned: information: 


12.RESERVED FOR EXECUTIVE SECRETARIAT USE 

AG FILE: FEDERAL BUREAU OF INVESTIGATION General AG Chron AS-3-30-98 
: NSC interest in 2 FBI cases 


13.EXECUTIVE SECRETARIAT CONTACT: 


hb 

h7C 





ALL IIJFORKATION CONTAINED 

HEKEIH 15 UNCLASSIFIED 

DATE 09-24-2012 BY 60324/UC/baw/sab/as 


t’.S. Department of Justice 
Federal Bureau .if Investigation 


March 20, 1998 


MEMORANDUM FOR THE ATTORNEY GENERAL 

, ->* 

THROUGH: THE DEPUTY ATTORNEY GENERAL ' 

FROM: > ©M^CTOR, FBI 

f 0 

SUBJECT: ITEMS PROPOSED FOR DISSEMINATION 

TO THE NATIONAL SECURITY COUNCTT. 


PURPOSE: To provide a letterhead memorandum with an update on 
two cases in which the National Security Council, (NSC) has 
expressed an interest-. 

TIMETABLE: None. 

SYNOPSIS: The NSC has, expressed an interest in the facts of the 

"Solar Sunrise" and "Blue Retina" investigations. The attached 
memoranda are appropriate for dissemination to the NSC, via White 
House Counsel, at your discretion. 

DISCUSSION: The NSC has expressed an interest in obtaining 

information about two pending FBI cases captioned, "SOLAR 
SUNRISE" and "BLUE RETINA." Consistent with the Department of 
Justice procedures governing communications with the White House 
about pending criminal and civil investigations, it is left to 
your discretion to forward the attachments to the White House 
Counsel for dissemination to the National Security Council, as 
appropriate. 
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Memorandum for the Attorney General 
Re: Items Proposed for Dissemination 


to the National Security Council 


RECOMMENDATION: That the Attorney General provide the White 

House Counsel with the aforementioned information for 
dissemina tion to the NSC, as appr opriate. 


APPROVE 



DATE MarA 30, 1998 


Concurring Components: 


None 


DISAPPROVE 


Nonconcurrina Components: 
None 


OTHER_ 

Enclosures (2) 





ALL FBI INFORMATION CONTAINED 

HEREIN 15 UNCLASSIFIED 

DATE 09-24-2012 BY 60324/UC /b aw/sab/as 

U.S. Department of Justice 


Federal Bureau of Investigation 


Washington, D. C. 20535-0001 

March 20,1998 


SOLAR SUNRISE 

This case involves intrusions into military, 
government, educational, and commercial computers. The 
intrusions were made by exploiting a known vulnerability inherent 
in certain operating systems. This exploit is called, "STATD ," 
pronounced stat-dee. While this exploit has been seen throughout 
the network community for approximately one year, a significant 
increase in observations was observed in certain military and 
government network systems beginning in mid-January 1998. 

On February 3, 1998, the Air Force Computer Emergency 
Response Team (AFCERT) notified the National Infrastructure 
Protection Center at FBI Headquarters of these intrusions. As a 
result, a joint investigation was initiated. That investigation 
quickly centered upon three individuals. Two of those 
individuals reside in California. Bot h of these subjects are 
juveniles. The third individual is an □ year old who resides in 
Israel. 


On February 25, 1998, agents from the FBI's 
San Francisco office and agents from Air Force Office of Special 
Investigations (AFOSI), and Naval Criminal Investigative Services 
(NCIS) conducted a search of the residences of the two California 
residents. The search was conducted pursuant to a search 
warrant. The search warrant was based in part upon interceptions 
of data made pursuant to a court-ordered data wiretap. During 
the search, the two subjects were interviewed in the presence of 
their parents. Both confessed to their participation in the 
intrusions. Both also provided information regarding the Israeli 
subj ect. 


NOT APPROPRIATE FOR DISSEMINATION TO THE PUBLIC 




On March 14, 1998, agents from the FBI, AFOSI, and 
National Aeronautics and Space Administration - Office of the 
Inspector General (NASA - OIG) traveled to Israel in order to 
secure the assistance of the I in 

procuring evidence necessary for a successful prosecution of 

I S r a S 1 i Citizen* Ac; ^ rocnH , ' * 1 ■ 


Federal agents remain in Israel to assist in the 
debriefing of all subjects involved. It is our intent to obtain 
sufficient evidence to prosecute this matter in the United States 
in the unlikely event that Israel agrees to extradite these 
individuals. 











Department of Justice 

EXECUTIVE SECRETARIAT 
CONTROL SHEET 


1 . 

FOLDER No: 

498180 

4. 

DATE 

OF DOCUMENT: 

03/18/98 

2. 

TRACKING ID No: 

X98-034339 

5. 

DATE 

RECEIVED: 

03/19/98 

3. 

RESERVED 


6. 

DUE I 

DATE: 

No Due Date 


7. FROM: Mark M Richard 

Deputy Assistant Attorney General 
Criminal Division 
Washington, DC 20530 

8. TO: AG/DAG 

9. CATEGORY: URGENT-RPT 


10.SUBJECT: 

Urgent Report advising that recently a U.S. investigative team 
traveled to Israel to pursue the DOD hacking case against the b s 

Israeli known as I I a co-conspirator and hacking tutor of one b 4 c 

of the CA teenagers previously searched for hacki ng military and b/D 
civilian systems. CRM/Richard discussed this easel I 


| See 498136 & 486197. (ehz) 
11.ACTION/INFORMATION: 


Referred To: Date Assigned: Information: 


OAG 


ODAG 


PAO 


03/19/98 


03/19/98 


03/19/98 


For information. Limited 
Distribution. 

To AG, OAG (Hogan). 

For information. Limited 
Distribution. 

TO DAG/EONS, ODAG (Litt). 

For information. Limited 
Distribution. 


12.RESERVED FOR EXECUTI VE SECRETARIAT USE 
See 497605, 500767, 


DOD computer hacking 


b6 

'b7C 


13.EXECUTIVE SECRETARIAT CONTACT: 







Department of Justice 

EXECUTIVE SECRETARIAT 
CONTROL SHEET 


1 . 

FOLDER NO: 

498136 

4. 

DATE OF DOCUMENT: 

03/18/98 

2. 

TRACKING ID No: 

X98-034292 

5. 

DATE RECEIVED: 

03/18/98 

3. 

RESERVED 


6. 

DUE DATE: 

No Due Date 


7. FROM: John C. Keeney 

Acting Assistant Attorney General 
Criminal Division 
Washington, DC 20530 

8. TO: AG/DAG 

9. CATEGORY: URGENT-RPT 

10. subject: 

Urgent Report regardin 
Israeli known as the 
folder 498180. 

11. ACTION/INFORMATION: 

Referred to: Date Assigned: information: 

OAG 03/18/98 For information. Limited 

Distribution. 

To AG, OAG (Hogan). 

ODAG 03/18/98 For information. Limited 

Distribution. 

TO DAG/EONS, ODAG (Litt). 

PAO 03/18/98 For information. Limited 

Distribution. 

12. RESERVED FOR EXECUTIVE SECRETARIAT USE 

dod hacking case 

13. EXECUTIVE SECRETARIAT CONTACT: 


the arres t in a DOD hacking case against an b 
T' See folder 486197. (cah) See b 




• • 

Department of Justice 

EXECUTIVE SECRETARIAT 
CONTROL SHEET 


1. FOLDER No: 486197 4. DATE OF DOCUMENT: 02/26/98 

2. TRACKING ID No:• X98-024789 5. DATE RECEIVED: 02/27/98 

B. RESERVED 6. DUE DATE: No Due Date 

7. FROM: Michael J. Yamaguchi 

U.S. Attorney, N.D. of California 
San Francisco, CA 94102 

8. TO: AG/DAG 

9. CATEGORY: URGENT-RPT 

10. SUBJECT: 

Urgent Report advising that on 2/25/98, the FBI executed search 
warrants and seized computers and computer storage devices. The 
subjects admitted their illegal entries into computer systems which 
included some military computers. (Note: EOUSA e-mailed ODAG and 
CRM.) (ehz) 

11 .ACTION/INFORMATION: 

Referred To: Date Assigned: Information: 

CRM 02/27/98 For information. Limited 

Distribution. 

cc indicated for CRM (Charney). 

OAG 02/27/98 For information. Limited 

Distribution. 

To AG, OAG (Hogan). 

ODAG 02/27/98 For information. Limited 

Distribution. 

TO DAG, ODAG (Litt). 


PAO 


02/27/98 


For information. Limited 

Distribution. 

cc indicated for pao <r~ 


12. RESERVED FOR EXECUTIVE SECRETARIAT USE 

AG FILE: REPORTS DOJ Urgent Sensitive 

: #2489 - FBI search warrants, illegal computer system entries 

13. EXECUTIVE SECRETARIAT CONTACT: I I 




